MAL-2025-183908 Malicious code in masv-ilo-cvai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f0052e352d2b7091b4c8349472bbdef5a42d4c94193c84b1b465235c573c416 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183308 Malicious code in libc-ubg-ag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 363a0abb6422ac1ec7e515a556af29bcc40d6db24c8efd4ee80d95dfcba2ae7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181766 Malicious code in avangi-olia-tabalauoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 638f059eb52180e391ecb5eff11a1b32cee664320de204ce4dc5457cf48b876d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knilu-bofavaunuffain (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f2873c4cdaa8c8342bed7ad7c0efd320a2f79c6eaae060da0e7e7dc30da80f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in libc-ug-agufixagidug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6fe9110843357a67cec0fcc88be355707277098f0820ec38c5d73333e05d057 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnu-nofy-gaoigaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f57a8dbed1f47ddafff5118d5ab9f19e48e737ab7b563be1a5d28f83b2b12c24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-difg-diguauota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a85a6d0c5a24ae4c55b9739af2c9511ad75b14f5c0b6dd689b0fa7715cf415cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonec-kat-fiugafav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f16ec554d587a5d1cd5dae8554c1cda2b5b4994cbe52341c9cbe53a09d4bb362 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soniec-kat-ihifcyafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91051899bb5bff0518f919693ec9f055b805c11bfd638cf3ceabde0a8d2fa7d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kos-fgiafao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8272ddaf144809d894182063c1348b143529b10c241b2ad070cf5805fc689fca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitoko-ontcami-lamokoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce5cc49f083a1bfd30ee643f40ac4df2638b6fbda131ca9c93652daa91f62038 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilmo-civasavum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d68cc82bd2170b58906eb8b70da08859c9faf3b990e04cfd3c07d1f256e0e91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kos-fusfog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df3526d8756b30184a19ff6014ac0972fcba170d20b7268869505b7e1ffa4372 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutg-oidablamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98b055684f2f73f6805c49bf8a15cff1aeff45e9b22a43b6e578226e5aeb95e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiko-akuivaaun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2453c2017ea392408a551be8d6681442185c3f90cb5190e2729f7d4116cf0103 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutuig-adisdfbasdglonolo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e947e2d18656b665721b0b1e689bbd479c4cd5f2b2743b32733efc22ee3ab470 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-dfg-dban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bed351291d043149a80cb2e833183d0d1fb92891a328cacb224124ae69627c1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggpyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f96473f976c621e187fb0f7b25e2f96e9deeaf957d0950906c032ebf0a33210 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-guga-visii (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fd58c74294120aeb25f0be98c8812dbbc4175806a5da42a3f09760353550641 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifst-daiikiula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d3ef65039fc7a353372090aca9ccd587aa45c19420431666af472e13b4538ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...